36 replies to this topic

[TheUraharaShop]

Here are a couple to test out and rate. Yes, they are not fool proof and they are not a per verbal sliver bullet. BUT if it doubles the time for a player to fake their registration, the less time management can spend hunting the ones who make it in game.

I find the ESP-PIX to be very interesting.

• reCAPTCHA. Stop spam and help digitize books at the same time! The words shown come directly from old books that are being digitized.
• SQUIGL-PIX. Our newest CAPTCHA!
• ESP-PIX. A CAPTCHA script that's close to our hearts. Instead of typing letters, you authenticate yourself as a human by recognizing what object is common in a set of images. This was the first example of a CAPTCHA based on image recognition.

http://www.captcha.net/


Here are some other ideas that were out there used by other sites and institutions.

- Currently looking for an application or codec where a registrant has to use a Flash Interface with a Key Board provided through the Flash App
- Better Encryption on registration and payment pages.
- Disabling Copy, Paste and Right Click http://www.hypergurl...rightclick.html
- Disabling other browsers from accessing specific parts of the website and or registration
- Endorse only one browser for users to use for account and payment transactions (Hopefully IE8 & 9)
- Prevent multiple windows directing or on the payment or registration pages from being opened at one time AND using the "Back Button", a special "link" would be provided to go "back".
- A second login is required to view the payments page.
- Cookies exspire with in 30 to 60 minutes on the registration or payment windows.
- Auto fill and remembering the username and passwords are disabled http://bytes.com/top...feature-browser

Edited by TheUraharaShop, 24 February 2011 - 06:11 AM.

[SisterGoat]

The Captchas don't work... they just hire people to do Captchas all day for next to nothing.

[soudou]

jRO have some different login process apparently to iRO which cut down on bots. Not sure what the "difference" is though.

EDIT: Ah you can read about it here how the login was changed, its part of RagDefender:
http://new.petitiono...O/petition.html

And so on December 21st, nPro and RagDefender were implimented in jRo. nProtect was a relatively harmless piece of anti-hacking software, the same as they use on kRo. The real workhouse was RagDefender. RagDefender was a fabulous piece of work. RagDefencer (henceforth RODef) scanned the RO folder for any dll hooks, It seriously encrypted the login process, and monitored ro from memory modifications.



It only took a few days for them to correctly get tools to hook back into the exe. Bots were still dead cause they couldn't figure out the current login process. But then something very unexpected happened. RODef updated in the middle of a day, and everything broke. Anytime you had anything try to hook into RO, it would simply fail, and report the failed attempt. Everything went down.



Durring this situation, several bot programs were released that supposedly would work with the patch, but instead "emulated" the bot, as in looked like it was working, and actually uploaded thier username/password to a public annonymous forum. There were hundreds, even thousands of bot user logins leaked.



The first proven attempts to get bots working seemed to come early january. By then, AreTool and ROFX managed to get themselves integrated back into the RO client using an alternate hooking method. Bots were beginning to successfully emulate the new client, although none of the working bots were ever publically released. But it only took a couple of days, and the client would update itself, and all the current methods to make tools work, and bots login, were dead yet again.



Tools have ultimately lost the battle against RagDefender. ROFX author officially ended his project, and AreTool developers were beginning to admit defeat. The creators of RagDefender were smart, and were using the official public forums of these tool and bot developers to learn how they were working, and to break them.



To this date, all tools are officially broken, no one can get anything substancial into the ragnarok exe. Bots have had scattered success however. RagDefender seems to be updating steadily enough that bots are still only able to login about 20\%-30\% of a week before they get broken again by gungho's efforts. Will thier steady attacks make the bot community fall appart? It seems to be working so far.



The statistics are startling. 3 days after the initial implimentation of nProtect and RagDefender, the average game population had dropped by 38\% durring peak gaming times, and dropped by roughly 70\% durring offpeak game times. That is quite sad really. Lately the death of bots have brought back a fair number of players, and the server populations are back on the rise.

Only trouble with RagDefend is its quite harsh and some OS e.g. 64-bit may not work with it or stuff like FRAPS etc. Unless jRO has changed that since because that page is many years old now. 3 years later Doddler mentioned bots are still low on jRO and population high (40k+).

Edited by soudou, 30 January 2011 - 04:37 PM.

[TheUraharaShop]

The Captchas don't work... they just hire people to do Captchas all day for next to nothing.

1.) That logic doesn't make sense, if that was the case, they'd legalize a lot of illegal activity around the world because "Someone else would only take their place or circumvent the current deterrents in effect". Oddly, enough that "small increase" to their overhead will create a price increase for the consumer. This is commonly seen at your local fast food chain. The prices set are effected by several factors (which are commonly known and we will not go in too) but when the price of an item goes up the consumer either has to develop a new product to sell or raise the price of the product. This is commonly seen with the Double Cheese Burger sold by McDondals and Burger King:


http://fastfood.ocre...seburger/41763/

http://abcnews.go.co...=6803935&page=1



Because of that they made the Buck Double and McDouble to save money. Botters will be forced to do the same or the consumer will be forced to pay more out of pocket.

2.) In addition, the longer it takes for a bot to make it in game, the better control management has in removing them more frequently and accurately target new and old bots alike. This isn't the sliver bullet this will only be a tool to allow
better use of the GM's time when handling the bot problem.


In short this is attacking them from two fronts: one by increasing their over head cost and second by increasing the amount of time it takes for them to register a bot and add it to their bot farm.

[Wiggles]

It seems Gravity has invested a lot of time and money into Warp Portal and Gateway.

I'm sure they have a 6-12 month game plan to implement their own anti-bot measures, similar to RagDefender.
Quote Heim: Once Gateway is required for login, tools like RCX will no longer work.
Suggesting ideas to them is probably useless, because they already have an idea of what they want.

I trust that they know what they are doing, and I also am aware of the costs involved in setting these things up.
They have to maintain their income stream while banning paying customers for illegal activities. Its a tough situation.

[Mwrip]

- Currently looking for an application or codec where a registrant has to use a Flash Interface with a Key Board provided through the Flash App

This is not only extremely annoying, but does not stop the bots. The sweatshop employees DO fill out the form.

- Better Encryption on registration and payment pages.

That has nothing at all to do with bots.

- Disabling Copy, Paste and Right Click http://www.hypergurl...rightclick.html

This is easily circumvented by the botters, and a pain in the ass for legit players with multiple accounts using some copypasta to pay faster.

- Disabling other browsers from accessing specific parts of the website and or registration

Again... great way to piss off potential real players, while doing nothing to bots.

- Endorse only one browser for users to use for account and payment transactions (Hopefully IE8 & 9)

FF has a greater than 25% market share, and a *much* higher share amongst gamers. I'm pretty sure the dominant browser for gamers is NOT IE, it's FF. Furthermore, an IE-only site is a great way to say "hey, we're living in the last decade, but we claim our games our current." Additionally, this bans all non-Windows players, in addition to making many others just plain quit - especially those who don't trust IE's utter failure at browser security with their CC info. Bots stopped by this action? Zero.

- Prevent multiple windows directing or on the payment or registration pages from being opened at one time AND using the "Back Button", a special "link" would be provided to go "back".

It's impossible to detect multiple windows reliably, unless you want to do it by IP and ban all the college players. Furthermore, again, this does NOTHING to stop bots.

- A second login is required to view the payments page.

Warpportal is already useless enough without taking away basically its only benefit... and again, this further pisses off users and stops 0 bots.

- Cookies expire with in 30 to 60 minutes on the registration or payment windows.

A script fills out the form in a fraction of a second. A sweatshop botter needs a minute, tops. A real player may actually need the 30-60 minutes if he's doing something else, grabs dinner halfway through filling out the form, or is otherwise in no hurry to register. Yet again: 0 bots stopped, real players pissed off.

Auto fill and remembering the username and passwords are disabled http://bytes.com/top...feature-browser

If you're logging in via bot, you're not using autofill, you're using a completely separate script which cannot be autodetected, or a simple browser macro. All this would do is, again, annoy players by disabling basic functionality for no reason.

Every last one of these ideas pisses off (and in some cases outright bans) real players, while stopping exactly 0 bots.

Edited by Mwrip, 30 January 2011 - 06:21 PM.

[TheUraharaShop]

Sorry for the delay in replying, I've been busy.

But with a quick response, with out a break down (sorry >_<)

Any implementation of the above as individual or collective will NOT stop the botting. This isn't meant to cause a decrease in their revenue by
causing their turn over to slow
(the time it takes to turn their product in to money)
or
cause their over head to rise
(the cost of paying NEW workers or playing over time to complete tasks )

IF and this is key IF EITHER happens, it causes the price of the product to increase. As we well know, at one time the conversion rate for USD to Zeny was $1 to 1m. After they changed the patches a few years back and bot farms were sluggish to patch their software the price then increased further. Today the conversion is crap, you can spend $50 bucks and get enough Zeny to buy... well crap. What needs to happen is to cause futher inflation or "ruining in brand" by causing their turn over to slow or their over head costs to rise.

What most people at this point are saying "Well that's easy they're in China! they dont get paid!" Well... if they don't get paid... people still have to eat... have housing...pay for electricity... internet connection... over head pay for upper management and currency exchanges... So unless someone can respond with a rule of economics that covers communist or socialist market types... FORM A UNIVERSITY OR LEGITIMATE SOURCE...then the point is mute. Really we need macro or micro economic business models or strategies to really beat this.

But...

As all ready know here in the USA is, that simple 2cent increase to the price of making that 50cent Hostests Honey Bun (yeah the one that was 2 for a $1) Suddenly shrunk in size and then were being sold for 99cents each... It is easy to see when the price of producing, making, marketing and/or selling a product increases; the price the consumer pays can increase SUBSTANTIALLY. Now the consumer has three choices, purchase the product and pay more, buy it from a different cheaper brand or stop buying the product all together. Since there only two sources of illegally sold Zeny moving through iRO, players really dont have a choice in changing brands to a cheaper seller (Unless the company's want to swallow those costs) so they'll slowly but surly stop buying zeny.

Dont believe it will work? Remember a family member or friend who use to smoke 10 to 15 packs of cigarettes a day? It is more likely then not they no longer smoke, smoke as many packs per day or changed brands all together due to the rising cost of a pack. Same is true here.

[Heimdallr]

I do appreciate the thoughtful posts regarding this.

it is a tough nut to crack to be honest, there are several companies that make nothing but anti hack/cheat stuff for a living and selling them off. It is an undesirable market that is leading companies to have to pay big bucks to try and stop as much of the cheating as possible.

We did some "things" recently with one of those companies that should start to show decent wins for us regarding our ongoing battle with bots. More is planned in the immediate future along with and following our F2P launch. All those are automated things that hopefully will not increase work load here, or annoyance factor for you. We just need to do a mass clearing to see how the robots respond.

[Kadelia]

I heard WoW has the option to lock an account with a keychain token that generates a number synced with satelite every few seconds and you have to enter the number on your keychain as part of your password to log in.

If you had to pay for one of those for each account and provide a shipping address, that would grind botting to a near halt... xP

[TheUraharaShop]

I do appreciate the thoughtful posts regarding this.

it is a tough nut to crack to be honest, there are several companies that make nothing but anti hack/cheat stuff for a living and selling them off. It is an undesirable market that is leading companies to have to pay big bucks to try and stop as much of the cheating as possible.

We did some "things" recently with one of those companies that should start to show decent wins for us regarding our ongoing battle with bots. More is planned in the immediate future along with and following our F2P launch. All those are automated things that hopefully will not increase work load here, or annoyance factor for you. We just need to do a mass clearing to see how the robots respond.

A law is a shadow of good things to come, never under thesame constant sacrifice can it make good of all who approach. It's not about enforcing the law, but putting in to place deterrentsthat make it easier to prevent the start up or slow these activities inprogress to be able to catch them not with their hand in the cookie jar, but ata point where it is clear that they are making a conscious attempt at breakingor circumventing the law.

It's not that it is a tough nut to crack, botting is nevergoing to stop like most illegal activity, but you have to make it either harderor more costly for people to participate or reap its rewards.

There best examples are seen with the procedure and policieswith public security guards and Shrinkage Policies by retail stores. These arenot there to STOP people from stealing, because people will still attempt to,but to make it so that people who are brazen enough to do so, waste valuabletime and effort breaking through those layers of defense to acquire thoseproducts and quite literally to catch the other people who just plain suck.

So through example; walk in to a local Best Buy and try to steal a CD, place itup under your shirt and walk out of the store. That is a straight forward andsimple way how to steal that CD. Now for those who actually have common sense, youâ??lleasily notice, the security guards, camera's and the security tag on the CD. Sothat means you have to obscure the vision of the Security Guard and camera toeither open the CD case and remove the security tag or have the hardware onhand to deactivate the tag AND then hid the product and exit the store withoutbeing stopped by security or the employees. Which sounds easy, but notice if itwere that easy, you'd be doing it too, and then remembering this is reality,not White Collar or Leverage people it's more likely then not, you'd be caught and arrested.

On the other hand,

Honestly, making registration take at a minimal 5-10minutes, more Captcha and forcing TimeOut and LogOut's for inactivity or browsertype isn't annoying because theregistration isn't just for 1 game, but for all of the games hosted byGravity... So if registration for iRO should take under 60's then registration,explanation and confirmation for the other games hosted and WarpPortal Pointsshould take 5-10 Minutes mathematically speaking of course.

But to be quite blunt, if you are a veteran player to iROand you have a problem with the registration... Honestly, needs to see that theIdea alone is a oxymoron. If you've been playing for 3 or 4 years, themchanging the Registration doesn't really effect you since your account (if itis in good standing) should be unaffected by changes... but ironically whenthey forced a mass Password Reset, people crapped a brick saying it wasuncalled for... That's honestly people not wanting change to a system they sayis broken and needs to be fixed, coincidently WITHOUT actually change. Thiswould be the so called annoyance factor and would be nothing but rubbish. It'sthat type of backwards thinking that caused the bot farms to grow unchecked iniRO to begin with further ruining the brand of Gravity.

In all creating operational redundancies will reduceillegal activity which has been proven true and cost effective time and timeagain for small businesses, large corporations and law enforcement.

[Maka]

The only way to stop bots and other crap in this game is to simply close iRO. Problem solved! no more Captcha, no more reports, etc.

Stop buying zeny. It's the simple and ultimate solution none of you seem to want to do.

Otherwise. Learn to deal. They won't be going anywhere. Ever. As long as money is to be made, they will find a way.

[DrAzzy]

Here is why CAPTCHAs will never work:

http://www.google.co...solving service

Some of them come with an API that can be incorporated into your bot, to automatically send it to the solving service, and enter the decoded entry, all within seconds.

CAPTCHAs only work when protecting something where the value of each entry it truly tiny (under 0.1 cents or so).

[renouille]

http://www.schneier.com/essay-063.html

[soudou]

What jRO did was create a bot stopper software and then update it every so often so that though it can get cracked it keeps them on the runaround.

[Hacks]

theres all manner of online games i dont bother with for a handfull of reasons, among them are nearly every suggestion in this thread. 5-10 minute regifrustration is at the top of the list. if it wants every detail of my personal life, requires manual approval of account, wants to call me at home to verify or requires a CC# even though it's "free" just to sign up, it's not worth my time. captchas work only to piss me off. seriously, javascript of all things has an image manipulation class that has been utilized for fairly reliable capcha solving in the past (google megaupload capcha solver). the hot thing now is client downloaders that use peer2peer downloading, these pieces of epic retardation were coded by a bunch of fresh out of school CS students to use kernel functions that dont exist outside windows XP/vista/7, not because they're better, but simply out of laziness. the game may run on 2k, but you cant download it, not worth my time. anything that requires some manner of tray icon to be running ALL THE TIME isnt worth my time or money either. all those other games on warpportal that i might have been interested in, they're dead to me due to the gateway requirement. requiring gateway for RO isnt going to work, in the end it will just be emulated and the botting will continue. requiring $1 worth of WPE to make a game account is more likely to work than anything. i'd-_- more about this but i gotta go back to work now.

[Talvis]

Well, I think Gravity has backed off on the required Gateway for now. I know they no longer require it for DragonSaga. Hopefully they never decide to go with it. Even if the program works perfectly (Which it is far from last I checked, It wont recognize my Rose installation that I installed from the link in Gateway), it will still annoy people.

Here's an idea I came up with after seeing how the GMs switching around a few options in Kafra temporarily broke the bots. Keyword though, TEMPORARILY.

Why not have a necessary NPC in the training grounds ask 4 easy to answer questions, but here's the catch, have the order of the questions randomized every time. And for even more fun, have it set up if you fail 4 times you get sent to the GM prison where a GM comes by on a regular hourly schedule to ban or in unfortunate cases, free innocent victims.
Unfortunately though, they could probably find a way to script the bots to adjust or they would just pay their sweat shop workers.

[TheUraharaShop]

Quickie~ The reason why the registration would take 10 minutes isn't because they are requesting more information from you, but verifying that is either correct, preforming animation times or showing new(or old) products, services and specials offered depending on the users age. Literally it's simple to make registration fun (which said in this context will be very hard to do) and the users wont notice the time flying past. This would be the basic registration. - Game Selection, only one game can be chosen at this time.- Start the game's download (if they haven't already downloaded it or installed it.-Input First & Last Name, Address, City and State.-Verify the ZIP code matches the geographical location, a simple codec can be written based on how the Zip Codes are assigned and arranged (wiki it, quite simple to write)- Have the user confirm a second time that informs the registrant that if ANY of the provided is false, incorrect or misleading information weather deliberate or accidental could cause their warp portal account to be suspended.-Input Email address and Password gain access to the website log in- Send verification email -Tell the user they should also register for the WarpPortal main Website and Support Warpportal for the community and support.-Guide users through the process to register for Support Warpportal to inform the players where exactly to get help and technical support.-Inform players about the Warp Portal Points, the deals and good items that they could get on the game they've selected with the Points- Select a Log in name and password for the game, indicate that users can (depending on the game) create and bind multiple in game accounts to one Warp Portal Account to be able to share points with family and CLOSE friends. Offer a choice to take the user after the form has been completed to look over how to do this and the steps in safety that should be taken if a player does this.- Send a confirmation email to the users indicating they've registered for the game and the warp portal account that it resides under. Include a link for them to follow to about botting, cheating and user 3rd party programs- Shows a brief overview of Gravity doesn't accepct or condone the user of 3rd party programs, in game bug abuse, and the buying and selling of in game currency and items for money.- Show the user other games they may want to try out, end of registration.
For a veteran player, yes most of that is dumb but for a player who just started, it places all the information they'll need right there as a part of their registration and they'll fully understand about the perks of the points, game play and styles and which game is right for them.

Edited by TheUraharaShop, 23 February 2011 - 01:27 PM.

[Hacks]

i still say the best way to deal with the bots is to require 100 WPE to create a game account.

now that the surveys and whatnot have been (for quite some time now) elevated to give WPE directly instead of KP, newbies can be directed to watch some commercials or install bing bar or something to get enough points to start, or simply get a gocash card to start their account. bots would either have to pay for WPE with actual funds (the easy, expensive way) or find a way to bot through surveys/application installs (the hard way). doing this creates additional revenue for gravity, allowing for expansion in payroll. expansion of payroll allows for more support staff to be hired. more support staff means bots get banned faster. faster bot removal means bots get remade more often. faster bot recycling means more accounts get created. more accounts created means more revenue, and the cycle continues.

this bot rebirth cycle, if it works out like i predict, could provide enough funding to allow for multiple positions to open up, allowing for a GM to be on patrol, ingame, 24/7. having this sort of support coverage would greatly improve customer satisfaction as downtime from random server crashes could be minimized from several hours to a matter of minutes. having a few staff members actually play the game as their full time job, taking the time to see how unrewarding quests are, how -_-ty the exp is past 100, how nearly every skill and item description in the game is just plain wrong, seriously raking over the fine details of the game and actually making notes for fixes as they go would make a great deal of difference in how the customers see the quality of the game. i'm not going to go into details on this atm but you can clearly see the problems just watching this forum, every few days a new thread about a certain axe and such.

i've come to the conclusion that there must be some manner of company policy that disallows employees from playing any titles they support. i've been playing this game, on and off mind you, since the beta days and the gameplay experience has never been as bad as it is now. we used to have daily announcements and random events from GOD-POING almost daily, or maybe not that often but it seemed like it. but back then, simple text edits in item descriptions, quest scripts, and database entries were fixed very quickly. patches came often back then from all the edits. i'm sure it was a mess to keep track of all that was done but the simple fact that things were getting done was a major positive impact on customer morale.

somebody needs to take the time, sit down and write out a script (vbscript, php, etc.) that reads the data from the item description file, the item attributes from the database and the item script for each item. have all this data side-by-side in a table so that everything can be seen together easily and just go item by item verifying that every item matches it's description exactly. i'm really getting tired of buying equips, putting them on, then seeing the effect of the item not match the description. the list of problems is far too long but i'll just start with this, most items that say 'Novice' anywhere in the name, are wrong.

items with a 'chance to cast' anything need to EXPLICITLY say their percentage. theres way too many items out there that say they have a good chance, which sounds good and all, but then further study shows good to be 0.5% and it isnt really that good then is it. we want specifics and we want accuracy. i understand theres a staggering number of items in this game but it really needs to be analyzed item by item to assure accuracy. if a weapon is 1 atk in the database and scripted to be +42 atk, i want to see the weapon say [ATK: 1 ,SPECIAL EFFECT: ATK + 42] or something like that, not ATK: 43. i cannot stress enough the value of accuracy in item and skill descriptions. scrolling back up through this post i wonder how i got here from there, rambling on again i guess. best to end it here.

[TheUraharaShop]

• Nice... tangent XD. That 's a very interesting, but for this discussion it's not really something to focus on (Fixing item descriptions and game mechanics). Not in anyways to down play the magnitude of that mistake, the players who do see actual errors and one sided fist fights due to game mech. need to collectively submit their findings, hopefully through iROWiki. That fan site has the design and player management to help report and show what needs to be fixed on their regular pages with out the tirades as we've seen on other threads. This an issue that needs attention through it's own discussion to ensure it get's the attention it deserves.
  
  
• But yes, the GM's need to put people on pay role who's sole purpose is to "play the game". A lot can be found if the management just went "undercover" and that wouldn't just be for iRO but for all the games. Now you (the GM's) can see how players play by the rules or break them allowing you to catch things early before youknowwhat hits the fan. On the same token, you all HAVE to show presences in the in-game communities. Hiring members who are doing nothing but PR, HR and then conveying that information to the management above them and pushing to the development and support teams. To keep it simple:
  
  
• Team Size: 10-15Games supported 2-3Hourly Shift: Staggered covering 1st & 2nd ShiftPurpose: To get a feel and show presence to the community that they take no crap! And now act as a 1st line of defense stopping the abuse and 3rd party programs of the games supported by Gravity as well as providing a positive (role) model for players. This would include more active twitter, facebook and other social media outlets. (Yes, with every person on that team doing a write up of someone or something in game will have players gaining a new feel to the game while feeling that their presence in game could be posted on Gravity's Site. The teams currently in place that do micro manage the game by preforming in-game investigations of in fractions should continue to preform those tasks, what the new team is doing creates a second layer to allow better resolutions for current and future problems.
  
  So... yeah hire 45 new people, heck you can get some college students on a Federal Work Study grant and since this isn't a tech heavy job requiring computer or coding experience (right away) it allows you all to really pick good social people to really help get jump start. And oh I forgot, you don't have to pay them a lot XD. So you save money, they get experience and access to a gaming provider and the community gets better.
  
  So that's 45 people who will:

• Post information, quirks and journeyman talk and discussion on Twitter and FaceBook EVERY 1 to 2 DAYS (Some weekends may be included).
• Offer small events depending on the game (some of the games offered of odd mini events like hide and seek for iRO)
• Buff/Heal/Support players on maps- Join in to PVP or PVM style fights and maps.
• Help players solve tier 1 (simple) issues and if not direct players to online sources for assistance if they dont know the answer.
• Help report botting and other illegal activity, they wouldn't (or shouldn't) have the right to ban, but players should understand that they ask for compliance and they are ignored, their report carry's more weight then a normal players. In a nut shell, not listening and/or being a jerk will get your account suspended for several days.

[/list]

Edited by TheUraharaShop, 24 February 2011 - 05:48 AM.

[sukidayo]

in the meantime, one simple solutions they can do to stop some bots is to deny multiple connections from a single ip. maybe allow 2 connections, more than that and the account needs to be investigated. they could also get a large list of public proxies and deny connections from those (to stop tunneling using public proxies).

[TheUraharaShop]

Well everyone says they'll just proxy their way around that... ironically. But steps like that should be taken to IP Ban Regions and Counties and talk with their ISP to help monitor, divert or block those addresses. Even though they'll just use another proxy, it will consolidate all the traffic to go through specific areas where they can monitor these activities easier.

[meoryou2]

Would you STFU about stuff you have absolutely zero understanding of?

Craptchas don't work.

IP banning will NEVER work... you can disable all known proxies, but thats just another use of botnets - re-routing traffic. Not to mention TOR nodes act as natural proxies. Blocking all known TOR nodes won't work either. Plus it's not difficult to rent a VPS in just about any country and set up a proxy redirect on it.

[Kadelia]

using technical jargon makes you sound smart

[TheUraharaShop]

1.) Blocking IP's isn't a sliver bullet just like how giving a person Acetaminophen for a fever doesn't CURE their aliment, it makes it more manageable for the patient... IP Bans never solve the problem it only prevents the current problem from exasperating.


2.) By no means do I mean this in a disrespectful way, but you don't have any Networking or Cisco Certifications or Degrees let alone actual REAL working experience as a Network Technician or Administrator. There is a big difference between reading about HOW to circumvent Cyber Security Protocols and actually PREFORMING AND PREVENTING. The proof isn't in what your next response is, it will be in weither you can prove true to your concept and defy an industry which makes BILLIONS through successful protecting of their clients and data. Seriously it's time to stop crap responses like this.


Better yet remember the DNS attack that happened to Master Card a few months back in connection to WikiLeaks? Yeah they've already caught the people involved.

-Almost for got the most important thing; Unless you have the financial backing or preform the attacks from sovereign/non-extradition soil, but mailing the money, you're going to get caught.



But in all honesty, if you already know all of the technical aspects of network administration and security, why aren't you pointing out and discussing other applications, programs, setups and procedures that Gravity could use to secure their network just as other Company's, financial institutions and Governments do as well? Or are you going to continue to reply project negativity with comments that only fuel the notion of not investing in ANY security applications or protocols to protect a network... because they wont work?

Edited by TheUraharaShop, 24 February 2011 - 11:34 AM.

[Xellie]

Used the term "silver bullet" twice and misspelled "silver" each time, on top of having a non-working space bar really makes me wonder if the poster is that smart.

Not to be rude or anything, just saying.